Global NTLM relay attacks deployed by APT28

High-profile organizations around the world have been targeted with NTLM v2 hash relay attacks by Russian state-backed threat operation APT28, also known as Fancy Bear, BlueDelta, Pawn Storm, and Forest Blizzard, between April 2022 and November 2023, according to The Hacker News.

april apt28 attacks bear blizzard email security fancy bear forest global hacker hash high november november 2023 ntlm ntlm relay ntlm v2 organizations profile relay russian state storm the hacker news threat threat intelligence vulnerability management world